Re: xauth generation issues

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Fredrik Tolf wrote (in a message from Monday 1)
 > Hi!
 > 
 > I've been playing around xauth a little just now, and I'm a bit
 > curious about the 'generate' command.
 > 
 > I've been able to do about what I want with this command:
 > 
 > file=`mktemp /tmp/xauthXXXXXX`
 > xauth -f "$file" generate :0 . untrusted timeout 120
 > 
 > However, having to store the cookie to a file and then just fetch it,
 > transmit it and delete the file again feels a bit awkward. Isn't it
 > possible to just get the cookie on stdout?

Not currently. Since the cookie has to be strored in a file
(~/.Xauthority in most cases) anyways, I don't really see that as a
problem. If you really need to generate cookies to there are at least
2 solutions :
- use some other external program to generate the random bytes and
  then feed the to xauth add
- patch xauth to accept - as a file name for -f to mean stdin/stdout
  depending on the operation and submit it to our bugzilla :)

 > 
 > Also, I have some questions about some of the options. Is it possible
 > to get one-shot cookies? 

Not currently AFAIK. It would probably be a nice thing to have to
enhance the security of the autorisation protocol, probably with some 
other mechanisms (like a public key based autorization scheme).

For now, to secure remote X11 connections, X -nolisten tcp along with
ssh tunnels are the best (and easier to set up) way. 

 > Where can I get information about how
 > application groups work?

xc/doc/hardcopy/Xext/AppGroup.PS.gz is the canonical documentation of 
the extension. I'm not aware of any other docs (beside source code). 


					Matthieu
_______________________________________________
XFree86 mailing list
XFree86@xxxxxxxxxxx
http://XFree86.Org/mailman/listinfo/xfree86

[Index of Archives]     [X Forum]     [Xorg]     [XFree86 Newbie]     [IETF Announce]     [Security]     [Font Config]     [Bugtraq]     [Yosemite]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux Kernel]

  Powered by Linux